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FOR EACH GROUP IN A PLURALITY OF TOP-TIER GROUPS 
IN THE TOP LEVEL TIER, ENCRYPT A TRAFFIC ENCRYPTION 
KEY USING A TIER-GROUP SPECIFIC KEY ENCRYPTION KEY 
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BROADCAST THE CORRESPONDING ENCRYPTED 
TRAFFIC ENCRYPTION KEY TO EACH OF THE 
PLURALITY OF TOP-TIER GROUPS 
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WITHIN THE GROUP THAT INCLUDES THE COMPROMISED 
NODE, RECURSIVELY BROADCAST THE NEW TRAFFIC 
ENCRYPTION KEY TO GROUPS OF NODES AT A SUCCESSION 
OF LOWER TIERS, UNTIL THE COMPROMISED NODE 

IS EXCISED 
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RECEIVE A MESSAGE ENCRYPTED WITH A 
TIER-GROUP SPECIFIC KEY ENCRYPTION KEY 



SEARCH A LIST OF ENCRYPTION KEYS FOR THE 
TIER-GROUP SPECIFIC KEY ENCRYPTION KEY 
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WHEN THE TIER-GROUP SPECIFIC KEY ENCRYPTION KEY 
IS FOUND IN THE LIST OF ENCRYPTION KEYS, DECRYPT 
THE MESSAGE TO PRODUCE A NEW TRAFFIC ENCRYPTION KEY 
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ENCRYPT A SUBSEQUENT MESSAGE 
WITH THE NEW TRAFFIC ENCRYPTION KEY 
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FROM A LIST OF TOP-TIER ENCRYPTION 
KEYS, SELECT A TOP-TIER KEY ENCRYPTION KEY 
THAT DOES NOT CORRESPOND TO A GROUP 
THAT INCLUDES THE COMPROMISED NODE 
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ENCRYPT A NEW TRAFFIC ENCRYPTION KEY 
USING THE TOP-TIER ENCRYPTION KEY, 
TO PRODUCE AN ENCRYPTED TRAFFIC 
ENCRYPTION KEY 
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BROADCAST A MESSAGE THAT INCLUDES . 
AN ENCRYPTED TRAFFIC ENCRYPTION KEY ^ 7J0 
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BROADCASTED TO ALL 
TOP-TIER GROUPS 
EXCEPT THE GROUP 
THAT INCLUDES THE 

COMPROMISED'NODE? 



WITHIN THE GROUP THAT INCLUDES THE COMPROMISED 
NODE, BROADCAST THE NEW TRAFFIC ENCRYPTION KEY 
TO A PLURALITY OF NODES NOT INCLUDING 
THE COMPROMISED NODE 
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WITHIN THE GROUP THAT INCLUDES THE COMPROMISED 
NODE, BROADCAST NEW TIER GROUP KEY ENCRYPTION 
KEYS TO THE PLURALITY OF NODES NOT INCLUDING 
THE COMPROMISED NODE 
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